It is worth noting that, in addition to the proposed extended CLT for dynamic DP-SGD accounting, exact accounting can be performed using the recently proposed methods by [1]} and [2]}, separately. However, because they both require numerical computation, given a total privacy budget, the computation of different noise power for the mechanism of each step becomes much involved.
<FIGURE>